Troy,

Thanks again for your quick help.

Yes, I've found a lots of signatures in sl-release-5.0-4.x86_64.
And thinking about all these keys I wonder why all of them are not 
installed as a part of the SL installation process?

I think that "rpm --import <key>" can not be run as postinstall program 
as rpm is already locked by installing sl-release, but could these keys 
be run by anaconda?


Alex

Troy Dawson wrote, On 08/30/2007 12:11 AM:
> Alex Kruchkoff wrote:
>> Troy,
>>
>> Where can we find your signature?
>> If it's not on the website, could you please publish it somewhere?
>>
>> Thanks,
>> Alex
>> Troy Dawson wrote, On 08/25/2007 02:19 AM:
>>> ...
>>> They are signed with my signature.  That means that you nead to put 
>>> the key into your rpm keyring.
>>>
>>> Troy
>
> Hi Alex,
> For all the signatures you might need for packages in Scientific Linux 
> you can go on the web at
>
> https://www.scientificlinux.org/documentation/gpg/
>
> Also, they are also found in the sl-release rpm package
>   rpm -ql sl-release | grep GPG
> We have started putting them in a standard place now, for all of SL 5, 
> and on newer SL 4 these signatures are in the directory
>   /etc/pki/rpm-gpg/
> (This is the same directory fedora has them in)
>
> I believe there is a yum command as well, but I'm not finding it at 
> the moment.
>
> Troy